Lucene search
+L

23027 matches found

Positive Technologies
Positive Technologies
added 2026/07/17 12:0 a.m.12 views

PT-2026-60849

Name of the Vulnerable Software and Affected Versions Feng Office version 3.11.13.11 Description An unauthenticated arbitrary file upload issue exists in the ck upload handler.php file. This allows remote attackers to upload malicious files, such as .html files, to the web-accessible /tmp/...

9.8CVSS6AI score0.00563EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/16 8:20 p.m.22 views

GHSA-X8MG-6R4P-87PF ArcadeDB has cross-database IDOR: /ts/*, /batch/*, Prometheus and Grafana handlers bypass authorization

About 14 HTTP handlers resolve the database path param and call getDatabase... WITHOUT user.canAccessToDatabase... and without setting the engine principal, because they extend AbstractServerHttpHandler directly instead of DatabaseAbstractHandler which holds the only per-database gate at...

7.1CVSS6.1AI score0.00319EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/16 7:47 p.m.4 views

GHSA-WPCJ-RMV4-86QG Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container

Summary Nuclio Dashboard exposes POST /api/functions without authentication by default NOP auth mode. The spec.handler field e.g., mymodule:myfunction is parsed by functionconfig.ParseHandler which splits on : only — no path validation is applied to the module portion. During function build,...

4.9CVSS6.3AI score
SaveExploits2References5
Github Security Blog
Github Security Blog
added 2026/07/16 7:47 p.m.15 views

Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container

Summary Nuclio Dashboard exposes POST /api/functions without authentication by default NOP auth mode. The spec.handler field e.g., mymodule:myfunction is parsed by functionconfig.ParseHandler which splits on : only — no path validation is applied to the module portion. During function build,...

6.3AI score
SaveExploits2References5Affected Software1
OSV
OSV
added 2026/07/16 4:17 p.m.6 views

SUSE-SU-2026:3082-1 Security update for libssh2_org

This update for libssh2org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSHMSGEXTINFO Handler bsc1268530...

8.2CVSS5.2AI score0.00918EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/16 12:0 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-49459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitizeroot, INPLACE: true could preserve...

6.1CVSS5.8AI score0.00303EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/07/16 12:0 a.m.10 views

PT-2026-60594

Name of the Vulnerable Software and Affected Versions YAML::Syck versions prior to 1.47 Description A heap use-after-free occurs when an anchor name is reused as an anchors-table key in the syck hdlr add anchor function. In the bundled libsyck, an anchor name allocated by syck strndup is stored a...

7.8CVSS5.2AI score0.00125EPSS
SaveExploits0References33
OSV
OSV
added 2026/07/15 9:25 p.m.8 views

JLSEC-2026-772 A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4

A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit h...

5.5CVSS5.4AI score0.00258EPSS
SaveExploits1References11
OSV
OSV
added 2026/07/15 9:25 p.m.8 views

JLSEC-2026-767 A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4

A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eos/SWapi.c of the component HDF-EOS Grid File Handler. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit...

5.5CVSS5.4AI score0.00264EPSS
SaveExploits1References12
OSV
OSV
added 2026/07/15 11:5 a.m.18 views

ROOT-APP-MAVEN-CVE-2026-42578 CVE-2026-42578 in io.root.io.netty:netty-handler-proxy - Patched by Root

Root has patched CVE-2026-42578 in the io.root.io.netty:netty-handler-proxy package for Root:Maven. Multiple fixed versions available...

7.5CVSS6.9AI score0.00952EPSS
SaveExploits1
OSV
OSV
added 2026/07/15 11:5 a.m.19 views

ROOT-APP-MAVEN-CVE-2026-50010 CVE-2026-50010 in io.root.io.netty:netty-handler - Patched by Root

Root has patched CVE-2026-50010 in the io.root.io.netty:netty-handler package for Root:Maven. Multiple fixed versions available...

7.5CVSS5.8AI score0.00279EPSS
SaveExploits0
OSV
OSV
added 2026/07/15 11:5 a.m.11 views

ROOT-APP-MAVEN-CVE-2026-44249 CVE-2026-44249 in io.root.io.netty:netty-handler - Patched by Root

Root has patched CVE-2026-44249 in the io.root.io.netty:netty-handler package for Root:Maven. Multiple fixed versions available...

8.1CVSS5.2AI score0.00573EPSS
SaveExploits0
OSV
OSV
added 2026/07/15 11:5 a.m.11 views

ROOT-APP-MAVEN-CVE-2026-45416 CVE-2026-45416 in io.root.io.netty:netty-handler - Patched by Root

Root has patched CVE-2026-45416 in the io.root.io.netty:netty-handler package for Root:Maven. Multiple fixed versions available...

7.5CVSS5.2AI score0.00478EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/07/15 9:56 a.m.7 views

CVE-2026-49459

A flaw was found in DOMPurify, a library designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting XSS attacks. A remote attacker could exploit a vulnerability in the DOMPurify.sanitize function when used with the INPLACE: true option. This flaw allows an attacker to bypass the...

6.1CVSS6.2AI score0.00303EPSS
SaveExploits1References6
NVD
NVD
added 2026/07/14 9:17 p.m.8 views

CVE-2026-49459

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitizeroot, INPLACE: true could preserve event-handler attributes on an attacker-controlled root when a descendant name clobbered properties checked by isClobbered, because forceRemove...

6.1CVSS0.00303EPSS
SaveExploits1References3
OSV
OSV
added 2026/07/14 9:17 p.m.10 views

DEBIAN-CVE-2026-49459

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitizeroot, INPLACE: true could preserve event-handler attributes on an attacker-controlled root when a descendant name clobbered properties checked by isClobbered, because forceRemove...

6.1CVSS6.1AI score0.00303EPSS
SaveExploits1References1
NVD
NVD
added 2026/07/14 8:17 p.m.5 views

CVE-2026-48489

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, DefaultAuthenticationFailureHandler honored the request-supplied failurepath parameter when failureforward: true was enabled, allowing an unauthenticated...

8.7CVSS0.00475EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/07/14 8:1 p.m.9 views

CVE-2026-49459

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitizeroot, INPLACE: true could preserve event-handler attributes on an attacker-controlled root when a descendant name clobbered properties checked by isClobbered, because forceRemove...

6.1CVSS4.9AI score0.00303EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/07/14 8:1 p.m.51 views

CVE-2026-49459 DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitizeroot, INPLACE: true could preserve event-handler attributes on an attacker-controlled root when a descendant name clobbered properties checked by isClobbered, because forceRemove...

6.1CVSS0.00303EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/07/14 7:57 p.m.7 views

CVE-2026-59889 jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.18.0 until 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1, UnwrappedPropertyHandler.processUnwrapped replays buffered JSON for a @JsonUnwrapped property and calls...

6.5CVSS6.1AI score0.00346EPSS
SaveExploits0References4
Rows per page
Query Builder